» curated · synthesized
Skip the noise.
Read the signal.
Curated tech news and synthesis for developers and technology professionals.
» Latest posts
45 postsAuthenticated RCE Exploits Hit Redis via Stream, TDigest, TopK Bugs
Authenticated RCE chain hits Redis 6.2.22 through 8.8.1 via stream NACK double-free, TDigest and TopK module bugs, bypassing two prior CVE patches.
When AI Writes Most of the Code, Peer Review Must Be Redesigned
As AI agents write and review most production code, traditional PR-approval compliance controls no longer reflect reality—here's what should replace them.
LeakyLMs: Timing Attacks Expose LLM Architecture and Inference Tricks
LeakyLMs shows how timing side-channels can leak LLM architecture details and speculative decoding setups from production APIs like Gemini and Llama.
RubyGems CDN Caching Bug Could Leak Legacy API Keys to Other Users
A RubyGems.org CDN caching flaw could leak legacy API keys between users for up to an hour; CVSS 7.2, all legacy keys have been revoked.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comNew Linux benchmark tests corruption, snapshots, rebuilds on 26 layouts
Open-source Linux benchmark tests btrfs, ZFS, bcachefs, ext4 and XFS across 26 configs for corruption, snapshots, rebuilds and ENOSPC handling.
AI, Rockets, and Why Engineering Judgment Still Costs the Same
AI cheapens code generation, not engineering judgment. A rocket-engineering analogy — Apollo vs. the Soviet N1 — reframes how teams should review AI code.
World models remember, actors forget: fixing catastrophic forgetting in RL
Research shows world models retain memory in continual RL while actors forget; graded dream rehearsal recovers skills with zero environment interaction.
Hanwha security cameras shipped a GitHub admin token in firmware
A GitHub admin token with access to hundreds of repos was found hardcoded in Hanwha security camera firmware, exposed via a Vite build leak.
Quantprobe Runs a 110B-Parameter LLM on a 16GB RAM 2016 Desktop
Quantprobe shows how careful memory-tier placement lets a 2016 desktop with 16GB RAM run a 110B-parameter LLM, validated with pre-registered predictions.
mp-units drafts a type-safe design for dB, dBm, Np, pH before coding it
mp-units proposes a type-safe C++ design for logarithmic units like dB, dBm, Np, and pH, seeking expert feedback before implementation.